Repositories

runlot hosts Git repositories. This is not a GitHub integration — git clone and git push talk to our address.

cd my-project              # the project directory, where runlot.json lives
runlot repo create app
# my-org/my-project/app created
# origin registered: [email protected]:my-org/my-project/app.git
git push -u origin main

A repository belongs to a project. That is why the address has three parts, <org>/<project>/<repo>, and why a project can have several repositories — an app and an API, a frontend and a worker. Names only have to be unique within the project. Who can read or write follows the organization role.

Getting started

1. Register your public key

runlot key add
# registered ~/.ssh/id_ed25519.pub (ssh-ed25519, SHA256:…)

With no argument it looks for a default key under ~/.ssh. Pass a path to pick a different one: runlot key add ~/.ssh/work.pub.

A key is an identity here, so two people cannot register the same public key. Re-registering a known key is rejected.

ed25519  SHA256:C7pTddRdCM1JuEbdi+73oBN+sNAZhb1H5t3CJSlyPj4
rsa      SHA256:+6PMLfTVpcjjLOVSWgiRI0nVQ5f9bVl0nuzcJ0EfTfE

2. Create a repository

runlot repo create app          # private by default
runlot repo create app --public # anyone can clone

It is created in the same place runlot deploy and runlot pg work on — the project named by runlot.json in the current directory. If that directory is a Git repository, origin is registered for you. If origin already exists, it is left as is, and the command to point origin at the new repository is printed instead.

3. Push

git push -u origin main

Over HTTPS

You can use HTTPS instead of SSH. Create a token, and paste it when git asks for a password (any username works).

runlot token create laptop            # read and write
runlot token create ci --read-only    # clone only
git clone https://git.runlot.io/my-org/my-project/app.git

HTTPS and SSH are the same address, git.runlot.io, and SSH is on the ordinary port 22 — nothing to add to ~/.ssh/config.

The token value is shown once, when you create it. Keep it then — you cannot read it back. If you lose it, revoke it with runlot token revoke <id> and make a new one.

A push with a read-only token is refused with an explanation — it is not disguised as a missing repository.

Commands

runlot repo targets a project. Outside a project directory, pass both --org and --project. key and token are yours, not a project's, and work anywhere.

Who can do what

Permission changes take effect within ten seconds. Deleting a public key or revoking a token takes effect immediately — that is the whole reason those buttons exist.

History

Every push leaves a line. This is how you find a commit lost to a force-push.

runlot repo history app
# 2026-09-09T07:38:30Z	created	refs/heads/main	ae4bb959

Clones and fetches are not recorded.

What works, and what does not yet

Works: clone, fetch, push, branches, tags, force-push, branch deletion.

Browsing on the web

Open the project in the dashboard and use the Repositories tab. You can create a repository, switch branches and tags, and read the file tree, file contents, the commit list, and the ref history — who moved which branch, and how. Admins can rename, change the default branch or visibility, and delete a repository from its Settings tab. The Clone button gives the HTTPS and SSH addresses.

The web view states its limits up front: files over 1 MiB and binary files have no preview, and directories list the first 1,000 entries. Clone the repository to read past those.

Limits

When you hit a limit, git push prints the reason.

Common problems

Permission denied (publickey) — Check with runlot key list that the key is registered. If you juggle several keys, say which one to use:

Host git.runlot.io
  IdentityFile ~/.ssh/id_ed25519
  IdentitiesOnly yes

non-fast-forward (fetch first) — Somebody pushed in the meantime. Run git pull --rebase and push again, or git push --force if you really mean to overwrite.

Pushing or cloning an old two-part address — addresses now have three parts, <org>/<project>/<repo>. SSH tells you what to fix; HTTPS reports the repository as missing. Point the remote at the new address.

runlot repo list                # shows the current address
git remote set-url origin [email protected]:my-org/my-project/my-app.git

You renamed the repository — update the remote you registered:

git remote set-url origin [email protected]:my-org/my-project/new-name.git